topic Yes, like i said, ASA uses in Network Access Control

SSLVPN authentication via another RSA server not working

Mike Farnschlaeder — Mon, 11 Mar 2019 05:56:30 GMT

A customer of us configured a addiitional RSA-Server in "Remote Access VPN" -> "AAA/Local Users" -> "AAA Server Groups".

He the configured "Accounting Mode -> "Simultaneous", but this is not working.

Only the first server will be asked in this group and not both of them. When changing the order of the two servers, the first one will always be choosen.

How can i fix this?

ASA5515

ASA Version 9.4.(1) , ASDM 7.4.(3)

Thanks in advance.

I believe the ASA only uses

jan.nielsen — Tue, 28 Jul 2015 16:42:02 GMT

I believe the ASA only uses AAA group for redundancy, not load-balancing.

I just found this:Generally

Mike Farnschlaeder — Tue, 28 Jul 2015 18:31:09 GMT

I just found this:

Generally in failover scenarios we create AAA server group on ASA. The security appliance contacts the first server in the group. If that server is unavailable, the security appliance contacts the next server in the group, if configured. If all servers in the group are unavailable, the security appliance tries the local database if you configured it as a fallback method (management authentication and authorization only). If you do not have a fallback method, the security appliance continues to try the AAA Servers

Yes, like i said, ASA uses

jan.nielsen — Tue, 28 Jul 2015 18:48:39 GMT

Yes, like i said, ASA uses the aaa group for redundancy, and does not load-balance the requests between multiple servers in a aaa group. If you need this i would suggest using a load balancer